myGov scam emails: how to spot the fake account locked message
Quick answer
If an email from "myGov" has a link, button or icon to click, Services Australia says it's a scam. That covers locked-account warnings, suspicious sign-in alerts, refunds and tax return problems. Don't click or call the number in it. Sign in with the myGov app or by typing my.gov.au.
- Comes by
- Email, Text, Phone call
- Pretends to be
- myGov
- First reported
- Latest official alert
- (Scamwatch (ACCC))
- Last updated
How it works
Scammers copy myGov's images and wording to send phishing emails that lead to a fake myGov website built to steal your sign-in details and personal information. Services Australia describes these common versions:
- A payment or refund. You're asked to update personal or bank details through a link, button, icon, QR code or attachment to receive a payment, refund or subsidy.
- Your account is locked. The email says your account is locked or will be deactivated unless you click to sign in.
- Suspicious activity. It says someone signed in from an unknown device and asks you to fix it through a link.
- A problem with your tax return. It often opens "Dear myGov Customer", threatens legal action and carries an attachment asking you to confirm your details.
- A document to sign. It sends a link to review and sign a digital document.
Scamwatch and the ATO warned in June 2026 that tax time brings more messages like this, including fake emails and texts that link to fake sites or push you to call a number that reaches the scammer. With your myGov details, scammers can commit fraud in your name.
Red flags
- An email from "myGov" with a link, button, icon, QR code or attachment
- A message saying your account is locked, at risk or will be deactivated
- A request for your username, password, multifactor code or bank details
- A refund or payment you didn't expect that needs you to update your details
- "Dear myGov Customer" and a threat of legal action over your tax return
- A sender address that doesn't end in .gov.au
- Urgent language pushing you to act
Example message
Dear myGov Customer, we detected unusual sign-in activity on your account. Your account will be locked unless you verify your identity within 24 hours: [link]
What to do
- 1
Don't click, open attachments or call the number
Services Australia says to look up genuine phone numbers on its own website rather than call one in the email.
- 2
Sign in the safe way
Use the official myGov app or type my.gov.au into your browser. If there's a real problem with your account, you'll see it there.
- 3
Report the scam
Services Australia asks you to email suspected scams to its reporting address, listed on the myGov page. You can also report to Scamwatch.
- 4
If you gave your myGov details, secure the account
Change your myGov password and your other passwords that match it, and contact Services Australia. If the scam used the ATO's name, the ATO number on its website can help protect your ATO accounts.
- 5
If you shared bank or ID details, get help
Call your bank, and contact IDCARE for free support. Our guide on what to do after a data breach covers credit checks and password resets.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers need a name, an email address or a mobile number, and they get those from data breaches and from lists of personal details that brokers collect and resell. The more places your details sit, the more of these messages land in your inbox.
Serus finds the data brokers that list your details and sends the removal requests, and it alerts you when your email or phone number turns up in a breach. That won't stop every scam message, but it gives scammers less to work with.
Official alerts
- Scamwatch: Australian Taxation Office (ATO) and 'myGov' impersonation scams · Scamwatch (ACCC)
Frequently asked
Will myGov ever email me a link to sign in?
Services Australia says an email from myGov with a link, button or icon to click is a scam. Real myGov contact only asks you to sign in with the official app or by entering my.gov.au.
Is myGov a scam?
No. myGov is the Australian Government's online services portal. Scammers pretend to be it to steal sign-in details.
What will a real myGov message never ask for?
myGov says it will never ask you to reply with personal information or your sign-in details.
I got a message about my tax return. Is it the ATO?
Scamwatch and the ATO say to contact the ATO through its official app or website, or on 1800 008 540, to check whether contact is real.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
